The Paperless Office: It Is Possible & What You Need to Know

About this event

Justin Hendrickson, CISA, Practice Leader, Business Advisory Services
Grant Thornton LLP

Kyle Robinson, CISA, PCI-QSA, PCIP, Manager, Business Advisory Services
Grant Thornton LLP

Presentation & Continental Breakfast at 7:30
Networking at 9:00

With the increased use of electronic data and the sophistication of hackers, it is important that all organizational data be protected. Without a comprehensive data protection plan, you could place the organization and individuals at risk—both financially and legally. Join us to learn strategies to protect supporting documentation from alterations, record retention requirements, and the internal controls needed to accomplish these. Additionally, we will discuss what the reporting requirements are if your organization does experience a data security breach and how much such a breach might cost you—both in dollars and reputation. Learning objectives of this session include:

• Explain how to construct a comprehensive data protection plan
• Learn strategies to protect supporting documentation
• Explain what constitutes a breach
• Identify what typically happens during a breach event
• Describe appropriate actions to take if you suspect or have been notified that a breach has occurred
• List steps you can take to avoid or minimize the impact of a breach
• Learn the impacts and consequences of a breach

About the Presenters

Justin Hendrickson, CISA, has been providing clients with internal audit/internal control optimization assistance for over 15 years. As Practice Leader of Business Advisory Services, he works closely with Grant Thornton’s internal audit/internal control and Sarbanes-Oxley compliance clients throughout the Western Region to execute day-to-day internal audit activities and provide thought leadership in optimizing internal control activities. Justin has and continues to serves clients in a variety of industries, including nonprofit, financial services, manufacturing, and retail/distribution. Justin’s nonprofit experience includes serving foundations tied to higher education and healthcare providers. In addition, Justin has and
continues to serve on nonprofit Boards. Prior to joining Grant Thornton, Justin was with Arthur Andersen for six years, spending several years in financial statement audit before transferring into consulting services. He is a member of the Institute of Internal Auditors, the Information Systems Audit and Control Association, and the American Institute of Certified Public Accountants. Justin received his BA in Business Economics with an emphasis in Accounting from the University of California Santa Barbara.

Kyle Robinson

, CISA, PCI-QSA, PCIP is a Manager in the Pacific Northwest Business
Advisory Services practice and brings over six years of IT audit, security, and consulting experience in the high technology, telecommunications, manufacturing, and retail industries. Kyle specializes in assisting clients in their efforts to compliance with the internal control and security requirements of the Payment Card Industry Data
Security Standard. He is the lead manager and subject matter expert for PCI DSS and Cybersecurity in the Pacific Northwest market. He has also managed numerous information technology audits, security audits, and audits in accordance with Statement on Auditing Standards No. 70 and Statement on Standards for Attest Engagements No. 16. Kyle has extensive experience supporting and performing audits of IT General Controls, security audits,
penetration testing, vulnerability assessments, risk assessments, documenting internal control environments, testing and evaluating controls for design and operating effectiveness, remediating inefficiencies, and developing plans for improvement and continuous monitoring. Kyle received a BA in both Accounting and Management Information Systems from Western Washington University. He is also a member of Grant Thornton’s national Cybersecurity team as well as the Seattle chapters of the Institute of Internal Auditors, the Information Systems Audit and Control Association, and InfraGard.

About the Network

Nonprofit Fiscal Managers Association provides regular learning opportunities so you can stay up to date on nonprofit financial management practices and related legal and compliance issues. You will gain the knowledge, strategies, and systems you need to keep your organization on track.